foundersfcu.com

HTML metadata

Title: Home | Founders Federal Credit Union
Language: en
Generator: Drupal 11 (https://www.drupal.org)
Canonical: https://www.foundersfcu.com/

Technology

Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (10)

trabian-canvas-prd-files.s3.amazonaws.com×9
www.googletagmanager.com×5
arttrk.com×2
fonts.googleapis.com×2
api.glia.com×1
cdn.mgln.ai×1
cdn.rlets.com×1
cds-sdkcfg.onlineaccess1.com×1
cnv.event.prod.bidr.io×1
www.juicer.io×1

Social

Contact

Phone

8008451614

Registration

Registrar

Network Solutions, LLC

Created

1996-10-15

Expires

2027-10-14 513 days left

Updated

2025-02-07

Name servers

edns2.ultradns.biz
edns2.ultradns.com
edns2.ultradns.net
edns2.ultradns.org

DNS records live

NS

edns2.ultradns.biz
edns2.ultradns.com
edns2.ultradns.net
edns2.ultradns.org

MX

10 mxa-00262b01.gslb.pphosted.com
10 mxb-00262b01.gslb.pphosted.com

TXT

Show 5 TXT records

smartsheet-site-validation=Z29dhK02lely0WUaIpL5xv3i3pG-wrZ0
duo_sso_verification=3Msi8Cv5KuAJFgFPtNuv8E58XU7zY9HbW9KMUMs7YzQLmk08MYSIBiN82EWQzHWh
cisco-ci-domain-verification=54afeba103118c2fdd1c192824bb49abf84dcf7e2a97c4a69c7c0c9ee1d7b57d
7vcg7hg4p3rnsn1br7wb7c3dlrgvr4dv
MS=7A0E4BAEBFF6854D44D2BC81532096A0C98F9BA5

Email authentication strong

SPF

v=spf1 mx a ip4:50.58.89.101/32 ip4:208.104.173.11/32 ip4:208.104.173.12/32 ip4:148.163.148.195/32 ip4:148.163.153.134/32 ip4:12.145.177.240/32 ip4:208.235.248.20/32 ip4:68.232.131.30/32 ip4:68.232.140.103/32 ip4:68.232.143.79/32 ip4:174.46.62.33/32 ip4:170.146.220.100/30 ip4:170.146.220.104/31 ip4:170.146.221.100/30 ip4:170.146.221.104/31 ip4:198.185.62.235/32 ip4:198.185.63.235/32 ip4:12.175.11.50 ip4:166.73.7.20 ip4:144.86.200.0/24 ip4:144.86.201.0/24 include:_external.pscu.com include:res.cisco.com include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCyoQ7zdy94KUcSSLWzwDdVu29kKrC5ro206Ea1PgUftCXnk/SuP06qqW3iGz+k9yPHPLsOx7cxQ8n/HM/RmP…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcXZT4uRafN44NrvaxXy1kdBlZas7A8SKAx6k9aN8imKPUj6YARRmCZVU3Xh+cdc3pg+mJ9zqIeSg2WaA89H…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-04 to 2026-12-04

Expires in 199 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.foundersfcu.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src https: data: wss: 'unsafe-inline'; script-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'none'; style-src https: 'unsafe-inline'; frame-src https: mailto: tel: javascript:; frame-ancestors 'self'; child-src https: mailto: tel: javascript: blob:; connect-src https: data: blob: wss:; report-uri /report-csp-violation; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains